Our Privacy Storage Solutions

We provide two data privacy storage solutions to ensure your data security

Solution A:

You can entrust your data to us, and we will encrypt and store your conversation data and contract data on Mind, and we will put some data on the decentralized service provider Arweave, and we promise not to store your data centrally , may involve some data caching, but also to serve you better

Solution B:

First of all, all your conversation data and contract text data will be stored on Mind with your own wallet private key，than you can choose to store all your data on Arweave. You need to register an Arweave account and store the data encrypted according to the official process. In this case, the private key is required to decrypt the data to be viewed and updated, and the data is stored on Arweave you may have to pay a fee

Finally, you can change your storage plan during the process of using our products

Mind Encrypted Storage

Technology Solution Description

Part 1 Mind Lake

Enabling User Data Ownership through Mind Lake's Decentralized Zero-Trust Architecture

Mind Lake introduces a paradigm shift in data ownership with its decentralized zero-trust data lake model. The foundation of this innovation rests upon the comprehensive Full Zero Trust framework developed by Mind Network. This framework empowers secure end-to-end computation and storage for on-chain private data.

Data Security at the Forefront

Mind Lake introduces a paradigm shift in data ownership with its decentralized zero-trust Within the dApp's client-side architecture, the Mind Lake SDK (Software Development Kit) is integrated, facilitating end-to-end encryption for all data. This implies that data encryption and decryption occur directly on the client side. This pivotal step guarantees that raw data never traverses beyond the user's device. Leveraging cryptographic principles, only the data owner possesses the means to access their unencrypted information, thus ensuring unparalleled data security.

  • Write: The data will be encrypted on the client side by the data owner (Alice) who has the private key.
  • Read The data can be queried through Mind SDK and is returned to the client side with encryption. Only the data owner (Alice) who has the private key could decrypt it.
  • Store: Encrypted data is persisted on Mind Network. Mind Network and its node providers have no access to this data and also no private key to decrypt it.

Elevated Privacy Computing

Mind Lake boasts robust privacy computing capabilities that facilitate intricate computations and queries on encrypted data. This advanced functionality is made possible through cutting-edge cryptographic techniques embedded within the system.

  • Write/Upload: The user's data (Alice) is encrypted on the client side, then written or uploaded to Mind Network with encryption.
  • Compute: The encrypted data from the data owner (Alice) could be configured to allow the dApp to perform encrypted query or computation on the data. During query or computation, the data can be still encrypted, even in the memory, which ensures end-to-end encryption.

User-Controlled Access

Diverging from conventional centralized databases reliant on role-based access control, Mind Lake embraces a distinctive approach to user access management. Here, permission control is achieved through client-side encryption. Users equipped with decryption capability inherently hold access rights, effectively rendering all other entities, including Mind Lake itself, incapable of accessing the encrypted data.

Essential Aspects of Key Management

Mind Lake's key management revolves around a hierarchical three-layer structure, each serving a crucial role:

1. Data Key

Data keys stand as the primary safeguard for user data. Every data key corresponds to a specific data column and is generated during the initial encryption of said column's data. These Mind data keys are encrypted using the user's Mind account key and securely stored within Mind Lake as ciphertext. Only the user's Mind account key can decrypt these data keys.

2. Account Key

Bound uniquely to each Mind Lake user account, the account key is pivotal for managing and safeguarding data keys. This key is locally generated on the user's client side during the first login to Mind Lake. To enhance security, the Mind account key is encrypted with the wallet key and stored within the blockchain as ciphertext. This encryption ensures that only the owner of the wallet can decrypt the Mind account key.

3.Wallet Key

The Wallet Key, stored within wallets like Metamask, adds an additional layer of security. In Mind Lake, this key serves to protect the Mind account key, thereby fortifying the overall security posture of the system. Importantly, the Wallet Key is designed to remain non-exportable, enhancing the system's resilience against unauthorized access. Through this meticulous three-tiered key management approach, Mind Lake establishes an ecosystem where users exercise complete control over their data while enjoying unparalleled levels of security and privacy.

Part 2 Mind Datapack - Arweave solution

Leveraging Arweave to Strengthen User Data Ownership Autonomy

To bolster the independence of user data ownership, the integration of Arweave presents a resilient solution. Even in the unlikely event of a sudden and substantial disruption to Mind Lake, users can uphold their data ownership through the Mind Datapack approach, which archives encrypted data onto the Arweave network.

Arweave leverages decentralized blockchain technology to establish secure and perpetual data storage. It proves particularly advantageous for managing encrypted cold data that doesn't necessitate immediate processing but remains crucial for future reference. By seamlessly transferring data from the Mind Network to the Arweave ecosystem, the preservation of data becomes everlasting. With ownership of their respective wallets, data owners gain the flexibility to retrieve and decrypt their encrypted data from any location, at any time, without direct reliance on the Mind Network. This decentralized strategy ensures continuous data availability while simultaneously upholding confidentiality.

Guidelines for Archiving Data to Arweave using Mind Datapack

The process of archiving your data onto Arweave using Mind Datapack is streamlined into two simple steps

Step 1 Depositing Tokens to everPay Account

Prior to initiating the storage process on Arweave, it's essential to allocate a specific amount of tokens to your everPay account. While Arweave incurs a storage fee, users might not be accustomed to the native token AR and the Arweave wallet. Mind Datapack addresses this challenge by incorporating arseeding ANS-104 Bundle Light Node, which supports multi-token multi-chain payments through everPay. This feature empowers users to settle the Arweave storage fee by replenishing their everPay prepay account with tokens they are familiar with.

Step 2 Uploading Data to Arweave

Once tokens are allocated to your everPay account, the process of data archiving onto Arweave becomes seamless. Through a simple action within the dApp interface, Mind Datapack orchestrates the retrieval of designated data from Mind Lake. Subsequently, the data is decrypted locally on your client-side, re-encrypted using data keys protected by your wallet key, and finally, uploaded onto the Arweave network with the associated payment.

Seamless Data Retrieval and Management with Arweave's Transaction IDs

Post these two steps, you'll obtain a unique transaction ID from the Arweave network. This ID serves as your key to retrieving data from Arweave whenever needed, without incurring any additional charges. The dApp ensures the management of all archived transaction IDs, and for further clarity, users can query these transaction "itemIds" based on their wallet address via the dedicated blockchain tool: https://scan.everpay.io/